AIKIDO-2026-10738

TL;DR

n8n-mcp exposes webhook and API client flows that fetch attacker-influenced URLs behind SSRF checks. The prior validation could resolve a hostname once while the actual outbound HTTP connection could land on a different address later, which matches a DNS rebinding time-of-check/time-of-use gap. Redirect following widened how far a single allowed URL could pivot before pinning. The patch carries forward resolved address metadata and pins connections to the validated IP while stopping redirects so the transport matches the decision that passed SSRF policy.